On Thu, Oct 20, 2011 at 01:09:41PM +0200, Stefan Sperling wrote:
> On Thu, Oct 20, 2011 at 06:57:47PM +0800, 罗勇刚(Yonggang Luo)  wrote:
> > If the server restricted me to get the kind, what's the fastest way to fetch
> > it in other way?
> 
> No. The whole point of authorization is to prevent unauthorized
> clients from getting this information. If you can work around it
> you have found a security hole.

To put it another way: The fastest way of getting the node
kind of an authz-restricted path is to ask the server administrator
or some other user who has access to the path :)

Reply via email to